312-50V10 · Question #351
A botnet can be managed through which of the following?
The correct answer is A. IRC. Botnets are commonly managed via IRC channels, which serve as the command-and-control (C&C) infrastructure for the botnet operator.
Question
A botnet can be managed through which of the following?
Options
- AIRC
- BE-Mail
- CLinkedin and Facebook
- DA vulnerable FTP server
How the community answered
(45 responses)- A91% (41)
- B2% (1)
- C4% (2)
- D2% (1)
Why each option
Botnets are commonly managed via IRC channels, which serve as the command-and-control (C&C) infrastructure for the botnet operator.
IRC (Internet Relay Chat) has historically been the primary C&C mechanism for botnets because it allows a bot herder to join a private channel and broadcast commands to all infected hosts simultaneously. The protocol is lightweight, supports pseudonymous channels, and was widely available, making it ideal for coordinating large numbers of compromised machines. Most classic botnet families such as Agobot and SDBot used IRC-based C&C.
Email is not used for real-time botnet command issuance because it lacks the low-latency, bidirectional channel structure needed to efficiently control large numbers of bots.
Social media platforms like LinkedIn and Facebook can theoretically be abused for covert C&C but are not a standard or primary botnet management channel.
A vulnerable FTP server is an attack target or a data exfiltration staging point, not a mechanism for issuing real-time commands to botnet members.
Concept tested: Botnet command-and-control channel types
Source: https://www.cisa.gov/sites/default/files/publications/Botnet_Report_1202_2.pdf
Topics
Community Discussion
No community discussion yet for this question.